Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/A2DA1898656911E889701022C4F9AE02.roa
File: A2DA1898656911E889701022C4F9AE02.roa (raw, json)
Hash identifier: QYbquK62XWSTn4PRkMXoR4nfMTLLaW92RH4A36uEYDs=
Subject key identifier: AD:B2:40:45:6A:55:93:2B:74:24:17:76:09:78:E3:E8:12:38:35:CF
Certificate issuer: /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial: 146D
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/A2DA1898656911E889701022C4F9AE02.roa
Signing time: Sat 14 Sep 2024 18:05:20 +0000
ROA not before: Sat 14 Sep 2024 18:05:20 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 135586
IP address blocks: 203.159.65.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5229 (0x146d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150845
Validity
Not Before: Sep 14 18:05:20 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e5d05f-2756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:57:51:f8:72:1e:7e:a6:80:d0:da:3c:f1:
11:e4:2c:64:d7:06:94:f1:81:05:51:7b:8a:a2:84:
a9:f6:bb:38:df:8f:8e:33:1d:2d:46:7b:c6:2d:f7:
30:e9:db:e3:bb:05:7b:73:63:2c:ae:e2:8e:03:ee:
01:f9:bd:28:1e:74:53:6b:fd:43:a7:fb:45:ec:d3:
9f:b5:5e:b3:a4:30:13:59:b0:d2:ad:fe:a1:70:6c:
8d:8a:bb:c9:ce:62:0e:ee:8c:8b:fa:fd:31:11:4c:
6d:d5:bf:aa:a5:02:59:72:1f:16:41:c8:12:5b:dd:
ca:4b:b9:10:54:34:dd:f8:40:fb:ae:d0:96:ec:90:
9b:77:2e:d0:f1:76:23:c9:ed:7a:c8:01:f6:b7:02:
05:d2:31:d2:ec:3d:2f:77:e6:9d:c1:ef:2c:00:ff:
f0:dc:c1:3b:a7:14:ad:14:83:6d:75:1d:7c:e9:02:
3e:ad:df:59:08:94:77:b5:e7:61:f2:28:28:54:c0:
76:14:3f:2f:65:b2:b0:7f:50:2c:32:da:99:ed:56:
d6:31:fb:dc:31:f4:99:2d:39:81:ca:d2:07:93:96:
10:18:e9:46:9c:32:f4:1e:9b:ed:cd:ed:1a:46:ec:
d8:07:42:ad:79:0e:b3:b2:bd:e3:6d:80:6a:92:76:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B2:40:45:6A:55:93:2B:74:24:17:76:09:78:E3:E8:12:38:35:CF
X509v3 Authority Key Identifier:
keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/A2DA1898656911E889701022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.159.65.0/24
Signature Algorithm: sha256WithRSAEncryption
86:98:da:1f:58:47:7d:c3:b7:35:00:0c:54:66:03:ab:04:74:
1b:44:b3:76:32:e3:d0:c0:29:9a:07:68:ce:7f:4f:65:80:b5:
90:64:ee:b2:ef:93:c0:9f:ba:e5:8e:0e:0c:8a:c8:bf:d5:cb:
03:5d:fb:4e:b8:1c:91:3f:da:1f:23:cf:8a:2e:b9:7e:e2:fa:
f3:e8:2d:bf:6a:0a:da:41:d6:24:66:80:5c:c5:1c:1e:9b:f4:
4c:06:7b:0b:45:28:cf:2d:ed:0f:a7:9e:4a:fb:a1:70:fc:d3:
9c:03:fa:34:ac:31:1a:46:1d:e2:84:b7:fc:14:f1:76:ae:1e:
80:9f:d4:f1:1e:2d:c5:d5:4a:67:02:98:a9:79:82:f6:19:f8:
45:b6:d3:af:0b:55:69:b4:3c:76:be:b5:65:3f:17:47:e4:88:
29:a1:ba:f1:a3:c1:b7:a3:d9:f4:33:3e:d9:e0:bf:97:e6:7b:
e5:d8:d0:17:f2:05:b6:9e:ce:e1:25:7a:23:3e:1d:5f:bf:0c:
81:99:28:c2:25:c1:b8:3c:b6:cb:40:7c:ab:ab:df:09:b9:a0:
f8:ca:74:2e:84:7e:80:09:8a:9f:6a:b9:5f:0e:e5:4e:ac:9e:
e9:27:d7:ec:de:88:3a:ac:fa:5c:6b:bd:e4:a8:c3:91:5d:92:
f4:a1:38:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:15 2025 by rpki-client